Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker
Commits: 9ca768f2 by Thorsten Alteholz at 2021-05-23T16:15:25+02:00 add slapi-nis - - - - - 85e3e2de by Thorsten Alteholz at 2021-05-23T16:16:00+02:00 add slurm-llnl - - - - - 1 changed file: - data/dla-needed.txt Changes: ===================================== data/dla-needed.txt ===================================== @@ -134,6 +134,10 @@ shiro (Roberto C. Sánchez) NOTE: 20201220: Upstream has responded. Working with them to backport fixes. (roberto) NOTE: 20210511: Upstream provided suggestions/guidance on testing of backported fixes; testing/tweaking is in progress. (roberto) -- +slapi-nis (Thorsten Alteholz) +-- +slurm-llnl (Thosten Alteholz) +-- spotweb NOTE: 20201220: The affected code uses string concatenation to construct a SQL query. NOTE: 20201220: Upstream's "fix" is to blacklist all the "bad" SQL commands. (roberto) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e2da6888672f0f24e5953001b366368c3eafec48...85e3e2de4cfc68fec6818646d696d292931d9f5c -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e2da6888672f0f24e5953001b366368c3eafec48...85e3e2de4cfc68fec6818646d696d292931d9f5c You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
